Aurora Claims Data from GILDE Handwerk Macrander GmbH & Co. KG
Summary
The Aurora ransomware group claims it holds sensitive records from GILDE Handwerk Macrander GmbH & Co. KG, including identity documents, payroll, tax and financial records. The claim is unverified and attributed to the group by ransomware.live.
Key points
- The Aurora group claims GILDE Handwerk Macrander GmbH & Co. KG is a victim; ransomware.live identifies the claim as based on the group's public post.
- The group claims the data includes more than 148 identity-document scans and ELSTER tax certificates for more than 50 entities.
- The alleged records include employee payroll data from 2006–2025, with tax IDs, social security numbers, bank details, salary information and personnel records.
- The claim also lists 20 years of financial records and more than 1,800 Access databases containing customer, supplier, inventory and order information.
- The article says it cannot confirm the group's claims and invites an official statement from the affected organization.
Article Details
- Victim
- GILDE Handwerk Macrander GmbH & Co. KG
- Claim Date
- 2026-08-04
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by aurora; not independently verified
- Exfiltrated Data
- The post claims the data includes personal ID document scans, ELSTER tax certificates, employee payroll records, financial records, and Access databases.
- Ransom Demand
- Not disclosed
- Leak Status
- A claim was published on 2026-08-04; the source says its accuracy could not be confirmed.